CVE-2025-43410Low· 2.4▾ SunlitThe issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.
macos < 14.8.2macos >= 15.0, < 15.7.2Upgrade past the affected range:
macos 15.7.2Connected by shared product, vendor, weakness, or advisory.
CVE-2025-43522Low· 3.3A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions
CVE-2026-65327High· 8.4A logic issue was addressed with improved checks
CVE-2026-86929High· 8.8An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-113943Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-113939Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-84496Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking